Codesys Control Runtime System Toolkit (Codesys) - vulnerabilities (CVEs)

40 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-08-03. Vendor: Codesys.

CVEs of Codesys Control Runtime System Toolkit

CVE-2022-4046 - CVSS 8.8 (high), 2023-08-03: In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user…
CVE-2023-37551 - CVSS 6.5 (medium), 2023-08-03: In multiple Codesys products in multiple versions, after successful authentication as a user, specially crafted network communication requests can utilize the…
CVE-2023-37554 - CVSS 6.5 (medium), 2023-08-03: In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with…
CVE-2023-37557 - CVSS 6.5 (medium), 2023-08-03: After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication requests can cause the…
CVE-2023-37550 - CVSS 6.5 (medium), 2023-08-03: In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with…
CVE-2023-37553 - CVSS 6.5 (medium), 2023-08-03: In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with…
CVE-2023-37556 - CVSS 6.5 (medium), 2023-08-03: In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with…
CVE-2023-37559 - CVSS 6.5 (medium), 2023-08-03: After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent…
CVE-2023-37549 - CVSS 6.5 (medium), 2023-08-03: In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with…
CVE-2023-37552 - CVSS 6.5 (medium), 2023-08-03: In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with…
CVE-2023-37555 - CVSS 6.5 (medium), 2023-08-03: In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with…
CVE-2023-37558 - CVSS 6.5 (medium), 2023-08-03: After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent…
CVE-2023-37547 - CVSS 6.5 (medium), 2023-08-03: In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with…
CVE-2023-37546 - CVSS 6.5 (medium), 2023-08-03: In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with…
CVE-2023-37548 - CVSS 6.5 (medium), 2023-08-03: In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with…
CVE-2023-37545 - CVSS 6.5 (medium), 2023-08-03: In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with…
CVE-2022-47393 - CVSS 6.5 (medium), 2023-05-15: An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of…
CVE-2022-47392 - CVSS 6.5 (medium), 2023-05-15: An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products…
CVE-2022-47387 - CVSS 8.8 (high), 2023-05-15: An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple…
CVE-2022-47390 - CVSS 8.8 (high), 2023-05-15: An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in…
CVE-2022-47389 - CVSS 8.8 (high), 2023-05-15: An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in…
CVE-2022-47388 - CVSS 8.8 (high), 2023-05-15: An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in…
CVE-2022-47391 - CVSS 7.5 (high), 2023-05-15: In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid…
CVE-2022-47384 - CVSS 8.8 (high), 2023-05-15: An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple…
CVE-2022-47380 - CVSS 8.8 (high), 2023-05-15: An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into…
CVE-2022-47383 - CVSS 8.8 (high), 2023-05-15: An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in…
CVE-2022-47386 - CVSS 8.8 (high), 2023-05-15: An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in…
CVE-2022-47379 - CVSS 8.8 (high), 2023-05-15: An authenticated, remote attacker may use a out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into memory…
CVE-2022-47382 - CVSS 8.8 (high), 2023-05-15: An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple…
CVE-2022-47385 - CVSS 8.8 (high), 2023-05-15: An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpAppForce Component of multiple CODESYS products in…
CVE-2022-47378 - CVSS 6.5 (medium), 2023-05-15: Multiple CODESYS products in multiple versions are prone to a improper input validation vulnerability. An authenticated remote attacker may craft specific…
CVE-2022-47381 - CVSS 8.8 (high), 2023-05-15: An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into…
CVE-2022-30792 - CVSS 7.5 (high), 2022-07-11: In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication…
CVE-2022-30791 - CVSS 7.5 (high), 2022-07-11: In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections.…
CVE-2022-22514 - CVSS 7.1 (high), 2022-04-07: An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of…
CVE-2022-22518 - CVSS 6.5 (medium), 2022-04-07: A bug in CmpUserMgr component can lead to only partially applied security policies. This can result in enabled, anonymous access to components part of the…
CVE-2022-22513 - CVSS 6.5 (medium), 2022-04-07: An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash.
CVE-2022-22517 - CVSS 7.5 (high), 2022-04-07: An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets.…
CVE-2022-22515 - CVSS 8.1 (high), 2022-04-07: A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify…
CVE-2022-22519 - CVSS 7.5 (high), 2022-04-07: A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the…